Re: Adding Computers to the Domain

From: Steven L Umbach (n9rou_at_nospam-comcast.net)
Date: 03/12/04 

Date: Thu, 11 Mar 2004 23:20:01 GMT

In the Domain Controller Security Policy enable auditing on account management and
then review your security logs in Event Viewer on the domain controllers for Event ID
645. You can download Event Comb from Microsoft to scan multiple logs for specific
events. Keep in mind that by default a regular user can add up to ten workstations to
the domain. You can change that by removing authenticated users from the user
right -add workstations to the domain in Domain Controller Security Policy. ---
Steve

"Alex Anderson" <AAnderson@Murrieta.org> wrote in message
news:e02gCI7BEHA.3748@TK2MSFTNGP11.phx.gbl...
> Hello Everyone,
>
> How do you put up an audit trail within Windows 2000 server to see who
> added a computer to the domain? I have a workstation object and I want to
> find out who added to the domain by supplying a user and password. Can this
> be done?
>
> Thank you
> Alex Anderson
>
>

Relevant Pages